Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/i9uW99_rY9dsxMlbWfVkJRH5388.roa
File: i9uW99_rY9dsxMlbWfVkJRH5388.roa (raw, json)
Hash identifier: HysniHEfMmsz7fh20BeJ/08Q4oKVqO/tGWfTyw7dctA=
Subject key identifier: 8B:DB:96:F7:DF:EB:63:D7:6C:C4:C9:5B:59:F5:64:25:11:F9:DF:CF
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A0F433F35A1AE15ECEDED6693F5DBFB38E
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/i9uW99_rY9dsxMlbWfVkJRH5388.roa
Signing time: Wed 30 Sep 2026 21:24:00 +0000
ROA not before: Wed 30 Sep 2026 21:24:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205220
IP address blocks: 163.5.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f4:33:f3:5a:1a:e1:5e:ce:de:d6:69:3f:5d:bf:b3:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 30 21:24:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8bdb96f7dfeb63d76cc4c95b59f5642511f9dfcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:6c:99:5b:46:2a:a2:fd:ec:23:77:4b:42:3c:
44:59:ac:78:95:7f:20:76:c3:77:50:16:2c:e4:97:
96:7a:c7:dc:be:c1:ef:c7:79:9a:5d:56:00:5e:61:
21:34:ab:86:c5:17:15:ba:c5:0f:14:98:42:e9:0c:
bb:50:d9:a9:bb:f6:c2:11:05:e7:35:60:71:f2:16:
b8:70:64:11:00:29:4b:9d:18:bf:71:be:66:01:73:
24:d3:10:ba:05:16:03:c6:89:00:bf:7c:b0:1f:1c:
0d:a9:ae:ee:f4:6e:82:65:5b:c3:de:7c:0e:a1:cb:
16:f9:d5:21:46:c6:39:1a:31:20:24:99:bb:7c:f9:
f8:5f:84:a9:23:0a:bf:de:22:75:b5:de:a1:00:60:
bc:94:31:1e:79:1c:a5:a9:79:c1:02:b3:7c:c3:a2:
d6:3b:41:7a:fb:45:37:0a:cc:b6:ef:10:54:2c:97:
10:b8:7a:e8:0e:cb:dd:0b:fc:c2:86:4b:62:42:42:
22:da:0c:0a:93:e6:dc:c5:5a:05:15:24:a0:8b:17:
e6:2b:6a:25:25:06:29:d8:88:69:19:2e:21:25:75:
28:f8:ff:d7:f8:fd:47:db:db:5a:f5:23:5c:d5:0d:
36:87:85:4a:29:22:18:22:02:46:06:b4:53:aa:5c:
f9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:DB:96:F7:DF:EB:63:D7:6C:C4:C9:5B:59:F5:64:25:11:F9:DF:CF
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/i9uW99_rY9dsxMlbWfVkJRH5388.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.71.0/24
Signature Algorithm: sha256WithRSAEncryption
33:aa:a8:f5:5d:54:21:6e:72:b8:51:f5:68:2f:cc:2e:3b:3d:
3c:57:4b:c4:1d:93:4f:ee:0c:d1:54:c9:c2:f3:23:d9:fb:1a:
92:da:4c:e2:2c:14:bd:ef:20:6c:f0:25:a9:97:03:8d:7d:08:
b2:0b:a0:14:e7:f0:53:bb:7a:de:51:d1:3f:fd:56:6c:17:74:
67:4d:57:09:90:e6:ad:f1:d9:a2:27:27:74:70:a8:43:7a:61:
c0:59:67:db:bf:f1:35:46:37:ea:bb:79:0b:54:a7:1e:f2:e8:
b5:0e:01:7d:89:e2:5c:70:1e:a2:f6:95:1b:4e:d7:80:49:70:
3e:54:31:19:6e:c2:a1:35:05:05:de:64:b5:6a:84:93:18:a3:
55:8c:6e:a7:13:b0:49:60:13:03:98:be:79:96:09:9e:7d:bb:
d7:16:cf:0f:1a:9d:ec:79:b5:50:36:33:bd:15:a7:9e:8e:37:
14:21:9f:0e:ac:43:98:2a:57:ce:5e:15:cb:e9:b6:72:34:d4:
2f:59:26:1a:04:3e:17:01:ad:5b:8b:02:12:ff:36:9a:2e:21:
72:b7:3a:07:f5:bb:14:83:99:35:c4:56:fa:f0:28:86:0b:fe:
2f:91:37:69:68:47:e6:a5:55:43:2c:53:b8:5d:f3:ef:6a:b5:
59:eb:2d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:35:44 2026 by rpki-client